Close this search box.

We are creating some awesome events for you. Kindly bear with us.

New mobile soft token solution to be implemented by GovTech subsidiary, Assurity Trusted Solutions

New mobile soft token solution to be implemented by GovTech subsidiary

Image credit: Assurity Trusted Solutions

In December last year, over 2.3 million SingPass users, constituting the majority of users, had set up their SingPass 2-Step Verification, also known as 2-Factor Authentication (2FA), placing an additional layer of security for their SingPass account and personal data. Now, the Singapore government is reviewing various options together with the industry, including offering a mobile soft token. 

On 14 February, Assurity Trusted Solutions (Assurity) entered into a collaboration with V-Key, a global leader in digital mobile security. V-key, headquartered in Singapore, is accredited by the Infocomm Media Development Authority (IMDA) to deliver an innovative form of authentication via V-Tap, V-Key’s mobile soft token application. V-Key’s software token, which is also deployed by top banks in Singapore, including DBS and UOB, combines the security of hardware tokens with the convenience of SMS-based One-time Password (OTPs).

Assurity is a wholly-owned subsidiary of the Government Technology Agency of Singapore (GovTech). Assurity manages the National Authentication Framework (NAF), a national initiative to strengthen cyber security through identity and access authentication.

Assurity’s authentication service, OneKey is used to perform secure logins, update personal details and conduct online transactions with multiple government and private service providers, including securities trading firms, banks and insurance companies. Till now, OneKey came as a hard token and SMS OTP. By the end of February, there will be the additional option of a mobile soft token.

Where and how can OneKey mobile be used (Image credit: Assurity Trusted Solutions)

Users will be able to download the new V-Tap enabled OneKey mobile app onto their mobile device and enrol with a registration code. This effectively binds their identity to their mobile device after which they can authenticate themselves and authorise transactions by means of the soft token.

The app, free for all Singaporeans and Permanent Residents, will be available for whitelisted, non-jailbroken iPhone & non-rooted Android smartphones. Access to the application is secured via PIN & Touch ID. In order to ensure the integrity of the app, the application is equipped to detect and assess threats, such as monitoring for rooted or jailbroken phones, remote administration tool, application tampering, runtime tampering and libraries tampering.

How to get OneKey mobile (Image credit: Assurity Trusted Solutions)  

Users often compromise on security for the sake of convenience and there is room for improvement when it comes to cyber hygiene awareness and practices in the Singapore population. In the recent CSA survey, close to three in five respondents were extremely concerned about the security of their financial and personal information. Over 4.1 million residents in Singapore own smart phones, making the OneKey Mobile app an even more convenient solution for many customers, while maintaining security. They can perform online transactions on-the-go conveniently, with one application, without any need to carry an additional device.

The mobile token offers several advantages over the hard token and SMS OTP. A hard token limited by its battery life of 3-5 years, a soft token app can be upgraded over time and requires next to no maintenance and very little cost. Unlike SMS-based OTPs, soft token-based OTPs do not require mobile network connections and can work offline, eliminating latency and delivery issues. It is also ideal for overseas users’ mobile phones with non-Singapore numbers.

In addition, the soft token authentication solution can be easily migrated to a new mobile device in case of loss, or change of device. If a person loses or replaces their phone, they can contact their service provider to reactivate the application on their new phone. Reactivation will deactivate the old application on their previous phone.

V-Tap is built on top of V-OS, V-Key’s pioneering virtual secure element, which equals or betters smart chip security specifications and offers multi-layered protection against advanced threats targeting mobile applications for the Assurity application. The protocols for verification of the user’s identity are as secure as those for services that require strong authentication such as financial transactions.

Charles Fan, Chief Executive Officer of Assurity said: “With cyber threats becoming more sophisticated and the increasing number of people accessing their online accounts via mobile applications, there is a need to outpace these threats and provide end-users with a highly secure and yet convenient authentication option. The launch of this new soft token solution underscores our commitment to constantly seek safe and innovative solutions that cater to consumers’ security and lifestyle needs, such as enabling quick access to multiple online services with the use of a single authentication device.”


Qlik’s vision is a data-literate world, where everyone can use data and analytics to improve decision-making and solve their most challenging problems. A private company, Qlik offers real-time data integration and analytics solutions, powered by Qlik Cloud, to close the gaps between data, insights and action. By transforming data into Active Intelligence, businesses can drive better decisions, improve revenue and profitability, and optimize customer relationships. Qlik serves more than 38,000 active customers in over 100 countries.


As a Titanium Black Partner of Dell Technologies, CTC Global Singapore boasts unparalleled access to resources.

Established in 1972, we bring 52 years of experience to the table, solidifying our position as a leading IT solutions provider in Singapore. With over 300 qualified IT professionals, we are dedicated to delivering integrated solutions that empower your organization in key areas such as Automation & AI, Cyber Security, App Modernization & Data Analytics, Enterprise Cloud Infrastructure, Workplace Modernization and Professional Services.

Renowned for our consulting expertise and delivering expert IT solutions, CTC Global Singapore has become the preferred IT outsourcing partner for businesses across Singapore.


Planview has one mission: to build the future of connected work. Our solutions enable organizations to connect the business from ideas to impact, empowering companies to accelerate the achievement of what matters most. Planview’s full spectrum of Portfolio Management and Work Management solutions creates an organizational focus on the strategic outcomes that matter and empowers teams to deliver their best work, no matter how they work. The comprehensive Planview platform and enterprise success model enables customers to deliver innovative, competitive products, services, and customer experiences. Headquartered in Austin, Texas, with locations around the world, Planview has more than 1,300 employees supporting 4,500 customers and 2.6 million users worldwide. For more information, visit


SIRIM is a premier industrial research and technology organisation in Malaysia, wholly-owned by the Minister​ of Finance Incorporated. With over forty years of experience and expertise, SIRIM is mandated as the machinery for research and technology development, and the national champion of quality. SIRIM has always played a major role in the development of the country’s private sector. By tapping into our expertise and knowledge base, we focus on developing new technologies and improvements in the manufacturing, technology and services sectors. We nurture Small Medium Enterprises (SME) growth with solutions for technology penetration and upgrading, making it an ideal technology partner for SMEs.


HashiCorp provides infrastructure automation software for multi-cloud environments, enabling enterprises to unlock a common cloud operating model to provision, secure, connect, and run any application on any infrastructure. HashiCorp tools allow organizations to deliver applications faster by helping enterprises transition from manual processes and ITIL practices to self-service automation and DevOps practices. 


IBM is a leading global hybrid cloud and AI, and consulting services provider, helping clients in more than 175 countries capitalize on insights from their data, streamline business processes, reduce costs and gain the competitive edge in their industries. Nearly 3,800 government and corporate entities in critical infrastructure areas such as financial services, telecommunications and healthcare rely on IBM’s hybrid cloud platform and Red Hat OpenShift to affect their digital transformations quickly, efficiently, and securely. IBM’s breakthrough innovations in AI, quantum computing, industry-specific cloud solutions and business services deliver open and flexible options to our clients. All of this is backed by IBM’s legendary commitment to trust, transparency, responsibility, inclusivity, and service. For more information, visit